Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rXb3kUOBFfTQWp0gDCNldV3RlHE.cer
File: rXb3kUOBFfTQWp0gDCNldV3RlHE.cer (raw, json)
Hash identifier: rdHFOGzmLIdNifb8xqDsUHbRGGRWFVZTjcrXxM2Jiq4=
Subject key identifier: AD:76:F7:91:43:81:15:F4:D0:5A:9D:20:0C:23:65:75:5D:D1:94:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E6B9362A519AA629C8A16F2E4BC61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/rXb3kUOBFfTQWp0gDCNldV3RlHE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:35:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.52.22.0/24
IP: 2a12:6e00::/29
Validation: Failed, certificate revoked on Thu 30 Nov 2023 11:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:6b:93:62:a5:19:aa:62:9c:8a:16:f2:e4:bc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad76f791438115f4d05a9d200c2365755dd19471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:2b:f9:23:d7:cf:dd:50:77:04:ef:d8:ed:
2a:b9:72:5e:34:2e:dd:a5:da:39:f4:b7:60:a9:54:
85:ca:e2:d3:0a:99:b2:b2:ec:ed:37:16:06:44:9d:
4b:93:bb:3c:e5:42:d2:03:2b:ae:c7:df:17:45:be:
6d:af:86:14:f2:6b:ac:9a:0f:b6:0e:13:5a:10:49:
4f:bb:50:de:0a:da:d4:01:c6:ef:98:a6:df:fa:a9:
30:a7:70:68:c2:27:09:dc:8f:64:3f:52:f8:d1:81:
c6:b3:3a:51:49:ac:8e:59:97:74:24:4b:81:0e:97:
81:a7:bd:94:2c:d9:c1:a3:44:20:12:17:a7:b2:df:
ce:81:5a:c1:b4:3d:85:56:c8:e8:ce:06:20:15:02:
28:67:c2:33:2a:14:2b:f3:b1:29:28:7a:cf:e2:d6:
60:bd:93:ed:be:17:c9:ce:46:15:2e:c5:f8:b9:4a:
d7:da:3f:d5:59:13:e1:08:f3:8e:6c:39:37:fd:bf:
95:6c:89:28:6c:9c:57:a9:20:a3:a0:29:63:df:51:
6f:04:40:13:ea:81:11:51:c1:0f:d6:a9:b5:8b:ad:
38:75:e2:7c:c2:48:38:31:46:cc:54:f5:2b:62:e0:
9b:b9:ed:57:22:e8:c7:af:4b:5e:96:33:c9:ac:8a:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:76:F7:91:43:81:15:F4:D0:5A:9D:20:0C:23:65:75:5D:D1:94:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/rXb3kUOBFfTQWp0gDCNldV3RlHE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.22.0/24
IPv6:
2a12:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
76:52:04:d9:b3:69:7e:f6:c7:1b:28:2d:b9:97:02:eb:d1:27:
1e:36:1e:e9:e1:df:c2:9b:58:10:eb:0a:3f:ef:38:e9:d8:7f:
5a:e0:f2:32:76:f2:47:64:b3:4f:4d:3a:5c:2e:de:f8:df:ea:
b8:80:33:29:66:c6:01:85:c8:72:9c:31:78:91:ec:b2:b1:a5:
e5:54:f5:3a:66:2d:3e:d6:65:39:28:60:3f:f7:e7:e6:2a:a2:
b1:52:80:0e:f5:38:b1:67:dc:ac:d9:13:a6:f3:17:ce:11:78:
07:7a:a3:f9:cc:7b:7f:9d:80:2f:a7:b0:9a:b2:aa:f7:c9:03:
0a:8b:4d:51:46:f0:87:c9:0d:6e:d5:e6:f7:8b:8b:5d:ef:f7:
9c:de:d0:f8:6f:a6:5f:e6:ae:54:f9:11:3f:1b:2e:89:b9:57:
9c:58:08:a6:c7:38:ce:ec:37:a6:23:46:ba:df:8c:e3:70:0b:
6f:86:55:e5:46:8c:c7:79:45:79:9f:97:f3:0f:8d:a7:c2:eb:
cb:fd:a5:b8:ac:7d:fd:13:99:b0:b7:08:c9:ef:e1:ec:32:ad:
f2:bf:9f:ae:81:86:f8:51:3d:3e:f9:98:b5:43:e4:9e:77:a9:
3d:0a:16:b7:eb:77:09:45:82:af:22:c8:e8:c6:0d:af:66:eb:
2b:c0:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:38 2024 by rpki-client on console-ams.rpki-client.org